x-ui

x-ui配置的3个关键点:

1. 放行Tailscale用到的内网IP段100.64.0.0/10

2. 在x-ui面板的【入站列表】（Inbound）中，找到你想启用嗅探的入站（比如 vmess 或 vless），点击【编辑】。在入站设置中找到 「开启 sniffing」或类似选项，开启它并且勾选：

   • 勾选 http

   • 勾选 tls

3. 设置DNS板块，填写好商家提供的解锁DNS和需要解锁的流媒体平台的域名

以下为示例配置文件

{
  "api": {
    "services": [
      "HandlerService",
      "LoggerService",
      "StatsService"
    ],
    "tag": "api"
  },
  "inbounds": [
    {
      "listen": "127.0.0.1",
      "port": 62789,
      "protocol": "dokodemo-door",
      "settings": {
        "address": "127.0.0.1"
      },
      "tag": "api"
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom",
      "tag": "direct"
    },
    {
      "protocol": "blackhole",
      "settings": {},
      "tag": "blocked"
    }
  ],
  "policy": {
    "system": {
      "statsInboundDownlink": true,
      "statsInboundUplink": true
    }
  },
  "routing": {
    "rules": [
      {
        "inboundTag": [
          "api"
        ],
        "outboundTag": "api",
        "type": "field"
      },
      {
        "outboundTag": "direct", //Tailscale的DNS IP为内网IP (100.100.100.100)
        "ip": [                  //因大部分机场后端会默认封禁内网IP，导致解析失败
          "100.64.0.0/10"      //所以需要添加这条路由规则对其放行
        ],                       //此路由规则需要插入在包含geoip:private的路由规则之前
        "type": "field"
      },
      {
        "ip": [
          "geoip:private"
        ],
        "outboundTag": "blocked",
        "type": "field"
      },
      {
        "outboundTag": "blocked",
        "protocol": [
          "bittorrent"
        ],
        "type": "field"
      }
    ]
  },    "dns": {
    "servers": [
      "1.1.1.1","8.8.8.8", 
      {
        "address": "100.100.100.100", 
        "port": 53,
        "domains": [
           "geosite:netflix",
           "domain:www.instagram.com",
           "domain:i.instagram.com",
           "domain:wikipedia.org"
        ]
      }
    ]
  },
  "stats": {}
}

可以复制上面的配置到x-ui配置中，然后复制DNS解锁商家给出的ip地址，粘贴到配置文件中的相应位置，在domains里可以添加解锁商可以解锁的相应流媒体域名，但是要保证添加格式一定要和上面相同，不然保存不了，比如要添加迪士尼解锁

        "domains": [
           "geosite:netflix",
           "geosite:disney"
        ]

x-ui配置里的geo文件自带有流媒体域名分流，所以要在前面加上geosite：而有些没有自带分流的就需要添加域名，但是要给每条域名前后加上英文双引号（”）号且用英文逗号隔开